Warning: Permanently added '10.128.1.189' (ED25519) to the list of known hosts. [ 92.217997][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 92.218015][ T31] audit: type=1400 audit(1790522324.827:189): avc: denied { mount } for pid=5938 comm="syz-executor419" name="/" dev="autofs" ino=8497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 92.432212][ T31] audit: type=1400 audit(1790522325.037:190): avc: denied { write } for pid=5940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.489559][ T31] audit: type=1400 audit(1790522325.097:191): avc: denied { write } for pid=5951 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.722383][ T5954] [ 92.724727][ T5954] ====================================================== [ 92.731725][ T5954] WARNING: possible circular locking dependency detected [ 92.738758][ T5954] syzkaller #0 Not tainted [ 92.743150][ T5954] ------------------------------------------------------ [ 92.750156][ T5954] syz-executor419/5954 is trying to acquire lock: [ 92.756547][ T5954] ffff8880349c0938 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4f8/0xd90 [ 92.766269][ T5954] [ 92.766269][ T5954] but task is already holding lock: [ 92.773631][ T5954] ffff888037e1c880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 92.782912][ T5954] [ 92.782912][ T5954] which lock already depends on the new lock. [ 92.782912][ T5954] [ 92.793291][ T5954] [ 92.793291][ T5954] the existing dependency chain (in reverse order) is: [ 92.802288][ T5954] [ 92.802288][ T5954] -> #2 (&of->mutex){+.+.}-{4:4}: [ 92.809475][ T5954] lock_acquire+0x1d1/0x380 [ 92.814476][ T5954] __mutex_lock+0x1a4/0x1bd0 [ 92.819562][ T5954] kernfs_fop_write_iter+0x2c2/0x5f0 [ 92.825350][ T5954] iter_file_splice_write+0x830/0x10b0 [ 92.831320][ T5954] do_splice+0x109c/0x1fa0 [ 92.836237][ T5954] __do_splice+0x33b/0x370 [ 92.841150][ T5954] __x64_sys_splice+0x187/0x250 [ 92.846502][ T5954] do_syscall_64+0x123/0x790 [ 92.851590][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.857979][ T5954] [ 92.857979][ T5954] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 92.865334][ T5954] lock_acquire+0x1d1/0x380 [ 92.870331][ T5954] __mutex_lock+0x1a4/0x1bd0 [ 92.875410][ T5954] anon_pipe_prefill_and_lock+0x16c/0x580 [ 92.881627][ T5954] anon_pipe_write+0x164/0x1b50 [ 92.886973][ T5954] __kernel_write_iter+0x6bb/0x930 [ 92.892579][ T5954] __kernel_write+0xf6/0x140 [ 92.897664][ T5954] autofs_notify_daemon+0x50d/0xd90 [ 92.903363][ T5954] autofs_wait+0x10fd/0x1b50 [ 92.908453][ T5954] autofs_mount_wait+0x132/0x3b0 [ 92.913890][ T5954] autofs_d_automount+0x490/0x950 [ 92.919501][ T5954] __traverse_mounts+0x1b9/0x8a0 [ 92.924952][ T5954] step_into_slowpath+0xb7e/0xf90 [ 92.930486][ T5954] path_lookupat+0x58b/0xc40 [ 92.935570][ T5954] filename_lookup+0x202/0x590 [ 92.940846][ T5954] vfs_statx+0xff/0x3f0 [ 92.945513][ T5954] vfs_fstatat+0x77/0xe0 [ 92.950267][ T5954] __do_sys_newfstatat+0x9d/0x120 [ 92.955800][ T5954] do_syscall_64+0x123/0x790 [ 92.960886][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.967271][ T5954] [ 92.967271][ T5954] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 92.974980][ T5954] check_prev_add+0xeb/0xe60 [ 92.980092][ T5954] __lock_acquire+0x1528/0x1f40 [ 92.985455][ T5954] lock_acquire+0x1d1/0x380 [ 92.990453][ T5954] __mutex_lock+0x1a4/0x1bd0 [ 92.995542][ T5954] autofs_notify_daemon+0x4f8/0xd90 [ 93.001241][ T5954] autofs_wait+0x10fd/0x1b50 [ 93.006344][ T5954] autofs_mount_wait+0x132/0x3b0 [ 93.011782][ T5954] autofs_d_automount+0x490/0x950 [ 93.017381][ T5954] __traverse_mounts+0x1b9/0x8a0 [ 93.022854][ T5954] step_into_slowpath+0xb7e/0xf90 [ 93.028495][ T5954] path_lookupat+0x58b/0xc40 [ 93.033590][ T5954] filename_lookup+0x202/0x590 [ 93.038869][ T5954] kern_path+0x37/0x50 [ 93.043541][ T5954] lookup_bdev+0xd8/0x2a0 [ 93.048367][ T5954] resume_store+0x1d6/0x460 [ 93.053365][ T5954] kobj_attr_store+0x58/0x80 [ 93.058457][ T5954] sysfs_kf_write+0xf2/0x150 [ 93.063545][ T5954] kernfs_fop_write_iter+0x3e0/0x5f0 [ 93.069354][ T5954] vfs_write+0x6af/0x1050 [ 93.074440][ T5954] ksys_write+0x12a/0x250 [ 93.079278][ T5954] do_syscall_64+0x123/0x790 [ 93.084378][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.090803][ T5954] [ 93.090803][ T5954] other info that might help us debug this: [ 93.090803][ T5954] [ 93.101014][ T5954] Chain exists of: [ 93.101014][ T5954] &sbi->pipe_mutex --> &pipe->mutex --> &of->mutex [ 93.101014][ T5954] [ 93.113414][ T5954] Possible unsafe locking scenario: [ 93.113414][ T5954] [ 93.120861][ T5954] CPU0 CPU1 [ 93.126197][ T5954] ---- ---- [ 93.131540][ T5954] lock(&of->mutex); [ 93.135495][ T5954] lock(&pipe->mutex); [ 93.142137][ T5954] lock(&of->mutex); [ 93.148607][ T5954] lock(&sbi->pipe_mutex); [ 93.153078][ T5954] [ 93.153078][ T5954] *** DEADLOCK *** [ 93.153078][ T5954] [ 93.161188][ T5954] locks held by syz-executor419/5954: 4, last CPU#0: [ 93.167827][ T5954] #0: ffff88807a6735f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 93.176849][ T5954] #1: ffff888037bc2460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 93.185786][ T5954] #2: ffff888037e1c880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 93.195499][ T5954] #3: ffff888020adbe18 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 93.205466][ T5954] [ 93.205466][ T5954] stack backtrace: [ 93.211341][ T5954] CPU: 0 UID: 0 PID: 5954 Comm: syz-executor419 Not tainted syzkaller #0 PREEMPT(full) [ 93.221042][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 93.231093][ T5954] Call Trace: [ 93.234371][ T5954] [ 93.237285][ T5954] dump_stack_lvl+0x100/0x190 [ 93.241969][ T5954] print_circular_bug.cold+0x178/0x1be [ 93.247426][ T5954] check_noncircular+0x146/0x160 [ 93.252354][ T5954] check_prev_add+0xeb/0xe60 [ 93.256932][ T5954] __lock_acquire+0x1528/0x1f40 [ 93.261773][ T5954] lock_acquire+0x1d1/0x380 [ 93.266261][ T5954] ? autofs_notify_daemon+0x4f8/0xd90 [ 93.271627][ T5954] ? __pfx___might_resched+0x10/0x10 [ 93.276898][ T5954] __mutex_lock+0x1a4/0x1bd0 [ 93.281478][ T5954] ? autofs_notify_daemon+0x4f8/0xd90 [ 93.286846][ T5954] ? autofs_notify_daemon+0x4f8/0xd90 [ 93.292216][ T5954] ? find_held_lock+0x2b/0x80 [ 93.296893][ T5954] ? autofs_notify_daemon+0x4a0/0xd90 [ 93.302260][ T5954] ? autofs_notify_daemon+0x4a0/0xd90 [ 93.307627][ T5954] ? __pfx___mutex_lock+0x10/0x10 [ 93.312640][ T5954] ? __mutex_unlock_slowpath+0x35d/0x930 [ 93.318260][ T5954] ? from_kgid_munged+0xab/0x130 [ 93.323187][ T5954] ? __pfx_from_kgid_munged+0x10/0x10 [ 93.328551][ T5954] ? path_lookupat+0x58b/0xc40 [ 93.333320][ T5954] ? autofs_notify_daemon+0x4f8/0xd90 [ 93.338698][ T5954] autofs_notify_daemon+0x4f8/0xd90 [ 93.343896][ T5954] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 93.349621][ T5954] ? lockdep_init_map_type+0x5c/0x250 [ 93.354982][ T5954] ? lockdep_init_map_type+0x5c/0x250 [ 93.360341][ T5954] autofs_wait+0x10fd/0x1b50 [ 93.364928][ T5954] ? __pfx_autofs_wait+0x10/0x10 [ 93.369862][ T5954] ? find_held_lock+0x2b/0x80 [ 93.374535][ T5954] ? path_has_submounts+0xcf/0x120 [ 93.379637][ T5954] ? do_raw_spin_unlock+0x145/0x1e0 [ 93.384830][ T5954] ? find_held_lock+0x2b/0x80 [ 93.389501][ T5954] autofs_mount_wait+0x132/0x3b0 [ 93.394433][ T5954] autofs_d_automount+0x490/0x950 [ 93.399459][ T5954] __traverse_mounts+0x1b9/0x8a0 [ 93.404393][ T5954] step_into_slowpath+0xb7e/0xf90 [ 93.409405][ T5954] ? rcu_is_watching+0x13/0xc0 [ 93.414172][ T5954] ? __pfx_step_into_slowpath+0x10/0x10 [ 93.419707][ T5954] ? lookup_slow+0x5b/0x70 [ 93.424107][ T5954] ? lookup_slow+0x5b/0x70 [ 93.428510][ T5954] path_lookupat+0x58b/0xc40 [ 93.433095][ T5954] filename_lookup+0x202/0x590 [ 93.437853][ T5954] ? __pfx_filename_lookup+0x10/0x10 [ 93.443139][ T5954] ? do_getname_kernel+0x5d/0x250 [ 93.448156][ T5954] ? __asan_memcpy+0x3c/0x60 [ 93.452732][ T5954] kern_path+0x37/0x50 [ 93.456795][ T5954] lookup_bdev+0xd8/0x2a0 [ 93.461112][ T5954] ? __pfx_lookup_bdev+0x10/0x10 [ 93.466038][ T5954] ? __asan_memcpy+0x3c/0x60 [ 93.470615][ T5954] resume_store+0x1d6/0x460 [ 93.475113][ T5954] ? __pfx_resume_store+0x10/0x10 [ 93.480137][ T5954] ? lock_acquire+0x1d1/0x380 [ 93.484804][ T5954] ? sysfs_file_kobj+0x21/0x290 [ 93.489684][ T5954] ? find_held_lock+0x2b/0x80 [ 93.494359][ T5954] ? sysfs_file_kobj+0xe4/0x290 [ 93.499202][ T5954] ? sysfs_file_kobj+0xe4/0x290 [ 93.504072][ T5954] ? __pfx_resume_store+0x10/0x10 [ 93.509096][ T5954] kobj_attr_store+0x58/0x80 [ 93.513677][ T5954] ? __pfx_kobj_attr_store+0x10/0x10 [ 93.518957][ T5954] sysfs_kf_write+0xf2/0x150 [ 93.523538][ T5954] kernfs_fop_write_iter+0x3e0/0x5f0 [ 93.528820][ T5954] ? __pfx_sysfs_kf_write+0x10/0x10 [ 93.534010][ T5954] vfs_write+0x6af/0x1050 [ 93.538331][ T5954] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 93.544129][ T5954] ? __pfx_vfs_write+0x10/0x10 [ 93.548885][ T5954] ksys_write+0x12a/0x250 [ 93.553202][ T5954] ? __pfx_ksys_write+0x10/0x10 [ 93.558047][ T5954] do_syscall_64+0x123/0x790 [ 93.562624][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.568510][ T5954] RIP: 0033:0x7fab79cd6b77 [ 93.572936][ T5954] Code: 48 89 fa 4c 89 df e8 98 1e 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 93.592567][ T5954] RSP: 002b:00007ffcb4ea4ee0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 93.600984][ T5954] RAX: ffffffffffffffda RBX: 000055556184c400 RCX: 00007fab79cd6b77 [ 93.608946][ T5954] RDX: 0000000000000016 RSI: 00007fab79d14c00 RDI: 0000000000000005 [ 93.616903][ T5954] RBP: 0000000000001733 R08: 0000000000000000 R09: 0000000000000000 [+] Successfully created pipe [+] Successfully mounted autofs [+] Successfully opened /sys/power/resume [+] Parent: writing to pipe... [+] Parent: splicing from pipe to sysfs_fd... [+] Parent splice returned (expected error): Invalid argument [+] Done [ 93.625138][